Show filters
509 Total Results
Displaying 41-50 of 509
Sort by:
Attacker Value
Unknown
CVE-2014-9656
Disclosure Date: February 08, 2015 (last updated October 05, 2023)
The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted OpenType font.
0
Attacker Value
Unknown
CVE-2014-9660
Disclosure Date: February 08, 2015 (last updated October 05, 2023)
The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted BDF font.
0
Attacker Value
Unknown
CVE-2014-9661
Disclosure Date: February 08, 2015 (last updated October 05, 2023)
type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted Type42 font.
0
Attacker Value
Unknown
CVE-2014-9670
Disclosure Date: February 08, 2015 (last updated October 05, 2023)
Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row.
0
Attacker Value
Unknown
CVE-2014-9636
Disclosure Date: February 06, 2015 (last updated October 05, 2023)
unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.
0
Attacker Value
Unknown
CVE-2015-0412
Disclosure Date: January 21, 2015 (last updated October 05, 2023)
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.
0
Attacker Value
Unknown
CVE-2015-0395
Disclosure Date: January 21, 2015 (last updated October 05, 2023)
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
0
Attacker Value
Unknown
CVE-2015-0383
Disclosure Date: January 21, 2015 (last updated October 05, 2023)
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot.
0
Attacker Value
Unknown
CVE-2014-6601
Disclosure Date: January 21, 2015 (last updated October 05, 2023)
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
0
Attacker Value
Unknown
CVE-2015-0408
Disclosure Date: January 21, 2015 (last updated October 05, 2023)
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.
0
